Digital forensics investigator vs Incident Investigators

Should they be lumped together? When hiring, do you guys look for people with both skills or do you focus on specific skillsets in said areas?

For pragmatic and development purposes, some might prefer a jack of all trades. Albeit in an actual incident, if urgency were a factor, would it still be the case ?

Their objectives quite different in that one focuses on attribution, the other on containment aspects.

Happy to hear some thoughts 💭 🙏😌

attribution case containment cybersecurity development digital digital forensics factor focus forensics hiring incident jack objectives people skills